Is there a way to mutate strings in the [inputs.logparser.grok] section? I’m pulling in website logs and some of our URLs contain GUIDs, I would like to replace that section of the url with different text.
I.E.
/blah/blah/ed803d5c-0e59-4da9-9625-83d27b605f6d/blah
mutates to:
/blah/blah/guid/blah
I’ve mapped the URL in custom patterns to %{URIPATH:CSURIStem:tag}
thanks
Garry